www.tokyomirai.ac.jp

- Tokyo Future University -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:f0:66:95:24:3e:0b:7a:bb:97:2c:1a:96:86:47:73 was issued on by DigiCert Inc.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tokyo Future University

Organization: Tokyo Future University
State / Province: Tokyo
Locality: Adachi-ku
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:f0:66:95:24:3e:0b:7a:bb:97:2c:1a:96:86:47:73
Serial Number (int): 11882055834319940674283258999803889523
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: db:bf:3e:c5:4d:38:bb:12:f4:63:a0:40:7f:6a:e6:b0:5f:c8:5e:ac
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d8:49:9d:66:73:c1:6f:25:23:e9:b9:19:55:30:4a:78:d5:37:c4:ca
Fingerprint (sha256): bc:d2:df:b2:93:5e:11:3a:06:02:cd:2e:ec:ac:37:7e:55:fb:24:cf:95:ef:e3:b0:97:37:10:41:b0:06:ea:05

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.tokyomirai.ac.jp

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tokyomirai.ac.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tokyomirai.ac.jp
tokyomirai.ac.jp
imsar.jp
www.imsar.jp
miraien.tokyomirai.ac.jp
corres.tokyomirai.ac.jp
mrms.tokyomirai.ac.jp
license.tokyomirai.ac.jp
www.freeschool.tokyomirai.ac.jp
tsushin.odawara.ac.jp
cols.odawara.ac.jp
rishu-web.odawara.ac.jp
foreign.sanko.ac.jp
www01.tokyomirai.net
www02.tokyomirai.net
helpdesk.sanko.ac.jp
navi.momoiku.jp
www.sanko.ac.jp
link.sanko.ac.jp
www.odawara.ac.jp
sankoshinjukai.sanko.ac.jp
license-portal.tokyomirai.ac.jp
photo.tokyomirai.ac.jp
blog.tokyomirai.ac.jp
form.sanko.ac.jp
www.sanko-group.info

Other certificates including the domain name tokyomirai.ac.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.tokyomirai.ac.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L408L/6S+xJaxxDh7F1
5QHOu+z7n+5MnRUV2WRCHbmlv7eCA6jCPVHD2RKk5HHxOWqRFzYPfbdflHKQa66x
N3GkvQLKmh69uHGimA6W+CsxbPSD6Bw4xdZBNxvrTkSG2gpfyS9I15ieik167dNS
qxYUpDRvhAoizfNtYws2I9VtzaupYWqu+YSJQ/l/uLyyTV/rEJzlM0yWZz/1g+bD
TpSPJ29zxEJr5+AQnyd5+Zr6Gt1yynU3vxzXNf8wDOmvRA/MW6D2aCW0CltRTmCH
RoejP0NMwKDar3v6WjTSQiJdA5fPg/Zivcod56OV1jwnoHcr7+E2DnK2qFCbeh2V
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11882055834319940674283258999803889523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adachi-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo Future University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tokyomirai.ac.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26856315120938188013059984884459046839304651625878358044287507415230266496244175996343035419740378266699329017858222118233388105791005378530757827125744426907110172578388629822291724726895817349580793118560944094580499849825738855652445950693049769124732489264923428611640115636097704007748718365543524567416702930424344845242548395014720921389608768724457483739728162049483745736732735251058109411985247907497364250172692363920764181603569448686573058381536842467656264240258991186494863119496853315552769431878684889009258377535086483447717739623502402146442763390874158566564393840778967726410028047316182347126151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbbf3ec54d38bb12f463a0407f6ae6b05fc85eac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (575 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imsar.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imsar.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miraien.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corres.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrms.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'license.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeschool.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsushin.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cols.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rishu-web.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreign.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01.tokyomirai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02.tokyomirai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navi.momoiku.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odawara.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sankoshinjukai.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'license-portal.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.tokyomirai.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.sanko.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanko-group.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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